Testing Dangerous Changes Safely in Ephemeral Environments